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CLAIMS 

The following is a complete listing of the claims. 

1 . (currently amended) A method of operating a first security module in a 
computer, the method comprising the acts of: 

detecting a second security module in the compute r, wherein the second security 

module is of the same type as the first security module : 
determining whether a key associated with the second security module is stored at the 

first security module; and 
obtaining the key associated with the second security module if the key associated 

with the second security module is not stored at the first security module. 

2. (currently amended) The method set forth in claim 1, wherein each of the first 
security module and the second security module comprises a trusted platform module 
("TPM"). 

3. (original) The method set forth in claim 1, comprising the act of requesting 
the key from the second security module. 

4. (previously presented) The method set forth in claim 1 , comprising the act of 
sending a public key from the first security module to the second security module if the key 
associated with the second security module is not stored at the first security module. 
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5. (previously presented) The method set forth in claim 1 , comprising the act of 
sending a public key along with validation information from the first security module to the 
second security module if the key associated with the second security module is not stored at 
the first security module. 

6. (original) The method set forth in claim 1, comprising the act of storing the 
key in a memory associated with the first security module. 

7. (previously presented) The method set forth in claim 1, wherein the key is a 
private key. 

8. (currently amended) A first security module in a computer, comprising: 

a detector that is adapted to detect another security module of the same type as 
the first security module in the computer and determine whether one of a plurality of 
keys stored at the first security module is associated with the other security module; 
and 

a device that obtains at least one key associated with the other security module 
if the one of the plurality of keys stored at the first security module is not associated 
with the other security module. 

9. (currently amended) The first security module set forth in claim 8, wherein 
the first security module comprises a trusted platform module ("TPM"). 
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1 0. (currently amended) The first security module set forth in claim 8, wherein 
the first security module is adapted to request the at least one key from the other security 
module. 

1 1 . (currently amended) The first security module set forth in claim 8, wherein 
the first security module is adapted to send a public key to the other security module if the at 
least one key is not stored at the first security module. 

12. (currently amended) The first security module set forth in claim 8, wherein 
the first security module is adapted to send a public key along with validation information to 
the other security module if the at least one key is not stored at the first security module. 

13. (currently amended) The first security module set forth in claim 8, wherein 
the at least one key is a private key. 

1 4. (currently amended) A first security module in a computer, comprising: 
means for detecting another security module in the compute r, wherein the other 

security module is of the same type as the first security module: 
means for determining whether a key associated with the other security module is 

stored_at the first security module; and 
means for obtaining the key associated with the other security module if the key 

associated with the other security module is not stored at the first security 

module. 
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15. (currently amended) The first security module set forth in claim 14, wherein 
the first security module comprises a trusted platform module ("TPIVF*), 

16. (currently amended) The first security module set forth in claim 14, wherein 
the first security module is adapted to request the key from the other security module. 

17. (currently amended) The first security module set forth in claim 14, wherein 
the first security module is adapted to send a public key to the other security module if the key 
associated with the other security module is not stored at the first security module. 

18. (currently amended) The first security module set forth in claim 14, wherein 
the first security module is adapted to send a public key along with validation information to 
the other security module if the key associated with the other security module is not stored at 
the first security module. 

19. (currently amended) The first security module set forth in claim 1 4, wherein 
the first security module is adapted to store the key in a memory associated with the first 
security module. 

20. (currently amended) The first security module set forth in claim 1 4, wherein 
the key comprises a private key. 
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21. (currently amended) A computer comprising: 
a processor configured to execute program instructions; 

a storage device configured to store program instructions to be delivered to the 

processor; 
a first security module; and 

a second security module , wherein the second security module is of the same type as 
the first security module, the first security module comprising: 
a detector adapted to detect the second security module and determine whether 
one of a plurality of keys stored at the first security module is 
associated with the second security module, wherein the first security 
module obtains at least one key associated with the second security 
module if one of the plurality of keys stored at the first security module 
is not associated with the second security module. 

22. (currently amended) The computer set forth in claim 2 1 , wherein each of the 
first security module and the second security module comprises a trusted platform module 
("TPM"). 

23 . (previously presented) The computer set forth in claim 2 1 , wherein the first 
security module is adapted to request the at least one key from the second security module. 
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24. (previously presented) The computer set forth in claim 2 1 , wherein the first 
security module is adapted to send a public key to the second security module if the at least 
one key is not stored at the first security module. 



25. (previously presented) The computer set forth in claim 2 1 , wherein the first 
security module is adapted to send a public key along with validation information to the 
second security module if the at least one key is not stored at the first security module. 

26. (previously presented) The computer set forth in claim 2 1 , wherein the at 
least one key is a private key. 

27. (previously presented) A method of unsealing information from a plurality of 
security modules, the method comprising the acts of: 

detaching an identifier from sealed information for one of the plurality of security 
modules; 

decrypting the sealed information with a key that is associated with another of the 

plurality of security modules; 
calculating a hash of the decrypted sealed information; and 

comparing the calculated hash to the identifier to determine if the key was used to 

encrypt the sealed information; 
returning a decrypt key found message if the key is the key used to encrypt the sealed 

information or returning a decrypt key not found message if the key is not the 

key used to encrypt the sealed information. 
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28. (original) The method set forth in claim 27, wherein the plurality of security 
modules comprise trusted platform modules ("TPMs"). 

29-30. (canceled) 

3 1 . (currently amended) A computer network, comprising: 
a plurality of computers; 

a network infrastructure that connects the plurality of computers together; 
at least one of the plurality of computers comprising: 
a first security module; and 

a second security module , wherein the second security module is of the same 
type as the first security module , the first security module comprising: 

a detector adapted to detect the second security module and determine 
whether a key associated with the second security module is 
stored at the first security module, wherein the first security 
module obtains the key associated with the second security 
module if the key associated with the second security module is 
not stored at the first security module. 

32. (currently amended) The computer network, as set forth in claim 3 1 , wherein 
each of the first security module and the second security module comprises a trusted platform 
module ("TPM"). 
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33. (new) The method set forth in claim 1, comprising the act of accessing data 
encrypted by the second security module using the key associated with the second security 
module if the second security module fails. 

34. (new) The first security module set forth in claim 8, wherein the first security 
module is configured to decrypt data encrypted by the other security module if the other 
security module fails. 
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